SB 472 Indiana Senate · 2025 Regular Session

Cybersecurity.

Summary

Requires political subdivisions, state agencies, school corporations, and state educational institutions (public entities), with the exception of specified categories of hospitals and the Indianapolis department of public utilities (department), to adopt not later than December 31, 2027, a: (1) technology resources policy; and (2) cybersecurity policy; that meet specified requirements. Provides the department is not required to report a cybersecurity incident to the office of technology (office). Requires the office to develop: (1) standards and guidelines regarding cybersecurity for use by political subdivisions and state educational institutions; and (2) a uniform cybersecurity policy for use by state agencies. Requires the office to develop, in collaboration with the department of education: (1) a uniform technology resources policy governing use of technology resources by the employees of school corporations; and (2) a uniform cybersecurity policy for use by school corporations. Requires: (1) a public entity to biennially submit to the office the cybersecurity policy adopted by the public entity; and (2) the office to establish a procedure for collecting and maintaining a record of submitted cybersecurity policies. Requires a public entity that engages a third party to conduct an assessment of the public entity's cybersecurity policy to provide the results of the assessment to the office.

Issues: ✓ Technology

Bill status signed all 5 stages cleared

Introduction

Jan 2025

Committee Review

Apr 2025

Senate Passage

Apr 2025

House Passage

Apr 2025

Signed into Law

May 2025

Introduced Jan 13, 2025 Signed May 1, 2025

Maddy AI version diff · 4 comparisons

What changed between versions

Senate Bill (S) → Senate Bill (H) · 5 edits

MODERATE

The bill was amended to add the Indianapolis Department of Public Utilities as a covered entity requiring cybersecurity policies, clarify reporting requirements for state agencies, and establish a new cybersecurity liability grant program to help government entities pay for insurance premiums. The digest was also updated to reflect these substantive changes along with formatting corrections.

Scope change

Expanded the scope of covered entities to include the Indianapolis Department of Public Utilities and clarified that state agencies are not required to report cybersecurity incidents to the office of technology.

SCOPE

Added the Indianapolis Department of Public Utilities as a covered entity that must adopt cybersecurity and technology resources policies by December 31, 2027.

REQUIREMENT

Clarified that state agencies are exempt from the requirement to report cybersecurity incidents to the office of technology.

Added requirement for public entities engaging third parties for cybersecurity assessments to provide results to the office of technology.

FISCAL

Established a new cybersecurity liability grant program administered by the Department of Homeland Security to help government entities pay for cybersecurity insurance premiums.

DEFINITION

Updated the definition of 'public entity' to explicitly include the Indianapolis Department of Public Utilities and clarify exclusions.

Floor votes · Senate Feb 20, 2025 · House Apr 15, 2025

How they voted

47–2

Passed · 1 other

Total votes 50

Feb 20, 2025

D Democratic10

9 Yea 1

90% Yea

R Republican40

38 Yea 2 Nay

95% Yea

Vote distribution

All Yea All Nay Mixed No data

Full legislative history

Actions timeline

Total actions

Key actions

Committee

Amendments

May 1, 2025

Signed into law

Signed by the Governor

executive

Apr 23, 2025

Upper · Passed

Signed by the President of the Senate

upper

Apr 22, 2025

Upper · Passed

Signed by the President Pro Tempore

upper

Apr 22, 2025

Lower · Passed

Signed by the Speaker

lower

Apr 21, 2025

Upper · Passed

Senate concurred with House amendments; Roll Call 477: yeas 43, nays 0

upper

Apr 15, 2025

Lower · Passed

Third reading: passed; Roll Call 454: yeas 97, nays 0

lower

Apr 10, 2025

Lower · Passed

Committee report: amend do pass, adopted

lower

Mar 24, 2025

Committee

Recommitted to Committee on Ways and Means pursuant to House Rule 126.3

lower

Mar 24, 2025

Lower · Passed

Committee report: amend do pass, adopted

lower

Feb 20, 2025

Upper · Passed

Third reading: passed; Roll Call 200: yeas 47, nays 2

upper

Feb 17, 2025

Upper · Passed

Amendment #1 (Brown L) prevailed; voice vote

upper

Feb 13, 2025

Upper · Passed

Committee report: amend do pass, adopted

upper

Jan 23, 2025

Upper · Passed

Committee report: amend do pass adopted; reassigned to Committee on Appropriations

upper

3 primary · 4 co-sponsors